ZoneCentral offers all the
features provided by the encryption solutions of Prim'X
Technologies.
ZoneExpress is particularly
suited to theft-protection for notebook PCs and can be easily
administered by the user himself. Some functions are not available
in ZoneExpress.
|
ZoneCentral
|
ZoneExpress
|
| ENCRYPTION |
|
|
| On-the-fly encryption of personal files on local or removable
drives |
 |
|
|
| Encryption of shared files on local, removable
or network drives (Windows, Unix, Novell servers, etc.) |
 |
|
| Automatic encryption of the swap file |
|
|
| Compressed and encrypted containers for the exchange of files
(.zed files) |
|
|
| Can encrypt the browser cache (Intranet protection) |
|
|
| Can encrypt the user profile (Desktop, My Documents, temp.
files, Internet browser cache, …) |
|
|
| It can encrypt entire workstations or volumes, including the
system volume (except for the system itself, to allow IT
administration by third parties) |
|
|
| Automatically detects USB memory keys, and offers
encryption |
|
|
| Compatible with roaming (encrypted profile) |
|
|
| Compatible with off-line encrypted files |
|
|
| Encrypted temporary files |
|
|
| 64-bit system support |
|
|
|
USER ACCESS KEYS
|
|
|
| Password access (controllable force) |
|
|
| Access controlled by RSA keys in PFX/P12 key holder files |
|
|
| Access controlled by RSA keys in PKCS#11 smart cards and CSP
containers |
|
|
| PKI and LDAP compatible |
|
|
| Group management (access files) |
|
|
| Role management (users, zone administrators, recovery and
backup) |
|
|
|
ENVIRONMENT SECURITY
|
|
|
| Cryptographic engine running in 'kernel mode' |
|
|
| Keyboard driver preventing the capture of access key PIN
codes |
|
|
| On-the-fly wiping |
|
|
| Ability to prevent the creation of clear files on removable
devices or in certain zones |
|
|
| ADMINISTRATION |
|
|
| Security policy based on GPOs (Group Policy Objects) which can
be managed at domain level |
|
|
| Signing the ZoneCentral configuration (GPOs) |
|
|
| Application for managing encrypted zones: ZoneBoard |
|
|
| Can be installed automatically (compatible with SMS, Tivoli,
etc.) |
|
|
| The delegation of rights and roles can be combined with the
users and Windows groups |
|
|
| SOS password |
|
|
| In-place, back-office or remote administration |
|
|
| Graphical or command line administration tools (all tasks) |
|
|
| Simplified, delegated or centralised administration |
|
|
| Automation of applications, of reapplications, or of the
control of the security plan |
|
|
| Network and office automation can be performed by service
providers having without 'right to know' |
|
|
| Programming Tool Kit (API)) |
|
|